GitBook Says AI Agents Accessed Infrastructure Credentials

GitBook said attackers using AI agents gained unauthorized access to some of its infrastructure credentials in a targeted attack on Nov. 2, potentially exposing secrets crypto teams use to connect services.

The documentation platform said it detected and contained the intrusion immediately. It reported no evidence that hosted content was changed.

Information that may have been affected includes integration tokens, Git Sync credentials and API tokens, as well as questions users submitted to GitBook’s AI assistant. GitBook revoked customer API tokens and told users to rotate credentials used with GitBook and third-party services. Users of its MCP server must authenticate again.

PancakeSwap temporarily took its documentation offline as a precaution. The decentralized exchange said its systems and app were unaffected, then moved the documentation to infrastructure it controls and restored access. Existing documentation links remain usable.

The incident centers on credentials that can connect documentation tools with project services, making the rotation request relevant to teams that used those integrations.